Processing of blender_2.71+dfsg0-3_sourceupload.changes
blender_2.71+dfsg0-3_sourceupload.changes uploaded successfully to localhost along with the files: blender-data_2.71+dfsg0-3_all.deb blender_2.71+dfsg0-3.dsc blender_2.71+dfsg0-3.debian.tar.xz Greetings, Your Debian queue daemon (running on host franck.debian.org) ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Re: [f...@linuxaudio.org: [LAD] First release of zita-njbridge]
I'll have a look ASAP sent via mobile ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
blender_2.71+dfsg0-3_sourceupload.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Tue, 05 Aug 2014 08:34:28 +0200 Source: blender Binary: blender blender-data blender-dbg Architecture: source all Version: 2.71+dfsg0-3 Distribution: unstable Urgency: medium Maintainer: Debian Multimedia Maintainers pkg-multimedia-maintainers@lists.alioth.debian.org Changed-By: Matteo F. Vescovi mfvesc...@gmail.com Description: blender- Very fast and versatile 3D modeller/renderer blender-data - Very fast and versatile 3D modeller/renderer - data package blender-dbg - debug symbols for Blender Changes: blender (2.71+dfsg0-3) unstable; urgency=medium . * debian/patches/: patchset updated - 0009-fix_includes_on_different_endian_systems.patch added Thanks to Campbell Burton (upstream devel) for the patch. Checksums-Sha1: 8dc28e6e45069dfa5095b371c87e867d0bd75052 2890 blender_2.71+dfsg0-3.dsc 56cd5326fa8f28621a5a9072dae0b4e77a640273 41900 blender_2.71+dfsg0-3.debian.tar.xz acd67ee7494e1f39ed2ad397076cc0bb96c63e5e 12146860 blender-data_2.71+dfsg0-3_all.deb Checksums-Sha256: 4edf1aae24af41e0bc37e5938eb4eb4a7bc09b84c92a86f88b4c5498c8e03bc7 2890 blender_2.71+dfsg0-3.dsc 5b8ca705decd4587a6e3ef42ce84302ff31ac6888ec09ed5b8dffdada1ac32e3 41900 blender_2.71+dfsg0-3.debian.tar.xz 1972e74e2ccd09c10ab2963b874862dd5c4e53a3128da527a27df942af440e04 12146860 blender-data_2.71+dfsg0-3_all.deb Files: 9bf4ecaf202b23a29c8458866c1cb9d3 12146860 graphics optional blender-data_2.71+dfsg0-3_all.deb 0165cd45a36b2540d3edcba25aa5b31d 2890 graphics optional blender_2.71+dfsg0-3.dsc e154e3d21940bc88e63ab6474df2bbcf 41900 graphics optional blender_2.71+dfsg0-3.debian.tar.xz -BEGIN PGP SIGNATURE- Version: GnuPG v2 Comment: Debian powered! iQJ8BAEBAgBmBQJT4JFcXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRGNTg2N0ZDMzRDQTU4REQ5RTU2M0I2MUVB NTA2MzVCQ0JGMDI1NzZDAAoJEKUGNby/AldsoT0P/0mgj2a0AkmhumcgsNH8recl dJO0t+vY2yIRbXNWDGMTe5u2+cgfygbCisbHVypA2r1nW+bagNffFviCEYQzErNk qjhq1X8iihw4qOOFSOqd9AjWgqtlgcW3qVbKENpwN5bE/yGfWDU33YUjWpDlcNBC OBfh3cASwdGfzpTMufRwkkcxb3eyZhEzrij0zeghdSMBURG8l1mThUB6Q7QF2CRF tOZXFttWFUjDLJDQQem3oQwV5Fvnp/Z+Sxwb9ufApEgbb7LAFRpsO+8CCuwUXFyx gqhegAQlGl4InW+LajgQwFCsrurYPltQb1pOou4t14ry/90lbIzwS6OdI2UIwA9K f7YUmw+Z+Y5fOoigT7nnK6IbgtDNZfcAxsd01HFaXy/Wow08ecpoCrw5zFz0ygb+ g99T4FflK1ywKzKq1svGif7QvaXcP37k25hMvtTIsmOYaYMQBQwu+3ANt2bsD4FM 71KPFZqaHBpCEw6Ew0xSgzJilAFbuMEs+xi5Vr/LrunJxz04TgM+yhwRew4BnStc IDc06wZzJAQS2bOSaRbqqaV0gWjkYfh+YfKA9OT1dMV5GpdTLEBUJFEjA+2MXT2A jTMKmDYqlxxlirsiM2huy6h2ax6JWjm+QHgK6oIkmJYBk+NH6hiPUgMg5EDF2DVE bjpQlhQ6mDuf7ol/9J/o =KPbd -END PGP SIGNATURE- Thank you for your contribution to Debian. ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Re: [f...@linuxaudio.org: [LAD] First release of zita-njbridge]
2014-08-05 10:48 GMT+02:00 Alessio Treglia ales...@debian.org: I'll have a look ASAP Interested too ;) Going to set ITP mira ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Bug#728039: Please compile VLC with VDPAU support
Control: found -1 2.1.5-2 On Mon, 04 Aug 2014 15:05:40 +0200 Alexander Kurtz alexan...@kurtz.be wrote: Version: 2.1.5-1 https://packages.qa.debian.org/v/vlc/news/20140729T215036Z.html says: vlc (2.1.5-1) unstable; urgency=medium . [ Benjamin Drung ] * New upstream release. * Add FFmpeg libraries as alternative build dependencies to libav. * Enable VDPAU hardware decoder support. You added a ./configure option to request VDPAU, but you forgot to bump libavformat/libavcodec versions in build-depends, as described earlier in this bugreport. Please consider bumping versions of these libs to 6:9 at least. (This is what we have to do when backporting vlc to wheezy for example). Reopening this bugreport, because the solution is incomplete. Thanks, /mjt ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Processed: Re: Bug#728039: Please compile VLC with VDPAU support
Processing control commands:
found -1 2.1.5-2
Bug #728039 {Done: Alexander Kurtz alexan...@kurtz.be} [vlc] Please compile
VLC with VDPAU support
There is no source info for the package 'vlc' at version '2.1.5-2' with
architecture ''
Unable to make a source version for version '2.1.5-2'
Marked as found in versions 2.1.5-2 and reopened.
--
728039: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=728039
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Processed: found 728039 in 2.1.5-1, notfound 728039 in 2.1.5-2
Processing commands for cont...@bugs.debian.org: found 728039 2.1.5-1 Bug #728039 [vlc] Please compile VLC with VDPAU support Marked as found in versions vlc/2.1.5-1. notfound 728039 2.1.5-2 Bug #728039 [vlc] Please compile VLC with VDPAU support There is no source info for the package 'vlc' at version '2.1.5-2' with architecture '' Unable to make a source version for version '2.1.5-2' No longer marked as found in versions 2.1.5-2. thanks Stopping processing here. Please contact me if you need assistance. -- 728039: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=728039 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Re: [f...@linuxaudio.org: [LAD] First release of zita-njbridge]
2014-08-05 12:08 GMT+02:00 Jaromír Mikeš mira.mi...@gmail.com: Interested too ;) Going to set ITP I uploaded initial packaging ... installing of upstream man pages should be fixed I guess. best regards mira ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Processing of vlc_2.1.5-1~bpo70+1_amd64.changes
vlc_2.1.5-1~bpo70+1_amd64.changes uploaded successfully to localhost along with the files: vlc_2.1.5-1~bpo70+1.dsc vlc_2.1.5-1~bpo70+1.debian.tar.gz libvlc-dev_2.1.5-1~bpo70+1_amd64.deb libvlc5_2.1.5-1~bpo70+1_amd64.deb libvlccore-dev_2.1.5-1~bpo70+1_amd64.deb libvlccore7_2.1.5-1~bpo70+1_amd64.deb vlc_2.1.5-1~bpo70+1_amd64.deb vlc-data_2.1.5-1~bpo70+1_all.deb vlc-dbg_2.1.5-1~bpo70+1_amd64.deb vlc-nox_2.1.5-1~bpo70+1_amd64.deb vlc-plugin-fluidsynth_2.1.5-1~bpo70+1_amd64.deb vlc-plugin-jack_2.1.5-1~bpo70+1_amd64.deb vlc-plugin-notify_2.1.5-1~bpo70+1_amd64.deb vlc-plugin-pulse_2.1.5-1~bpo70+1_amd64.deb vlc-plugin-sdl_2.1.5-1~bpo70+1_amd64.deb vlc-plugin-svg_2.1.5-1~bpo70+1_amd64.deb vlc-plugin-zvbi_2.1.5-1~bpo70+1_amd64.deb Greetings, Your Debian queue daemon (running on host franck.debian.org) ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
vlc_2.1.5-1~bpo70+1_amd64.changes ACCEPTED into wheezy-backports
Accepted:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Format: 1.8
Date: Tue, 05 Aug 2014 16:12:36 +0400
Source: vlc
Binary: libvlc-dev libvlc5 libvlccore-dev libvlccore7 vlc vlc-data vlc-dbg
vlc-nox vlc-plugin-fluidsynth vlc-plugin-jack vlc-plugin-notify
vlc-plugin-pulse vlc-plugin-sdl vlc-plugin-svg vlc-plugin-zvbi
Architecture: source amd64 all
Version: 2.1.5-1~bpo70+1
Distribution: wheezy-backports
Urgency: medium
Maintainer: Debian Multimedia Maintainers
pkg-multimedia-maintainers@lists.alioth.debian.org
Changed-By: Michael Tokarev m...@tls.msk.ru
Description:
libvlc-dev - development files for libvlc
libvlc5- multimedia player and streamer library
libvlccore-dev - development files for libvlccore
libvlccore7 - base library for VLC and its modules
vlc- multimedia player and streamer
vlc-data - Common data for VLC
vlc-dbg- debugging symbols for vlc
vlc-nox- multimedia player and streamer (without X support)
vlc-plugin-fluidsynth - FluidSynth plugin for VLC
vlc-plugin-jack - Jack audio plugins for VLC
vlc-plugin-notify - LibNotify plugin for VLC
vlc-plugin-pulse - PulseAudio plugin for VLC
vlc-plugin-sdl - SDL video and audio output plugin for VLC
vlc-plugin-svg - SVG plugin for VLC
vlc-plugin-zvbi - VBI teletext plugin for VLC
Closes: 742183 742625 743033
Changes:
vlc (2.1.5-1~bpo70+1) wheezy-backports; urgency=medium
.
* Rebuild for wheezy-backports.
* Add old-automake.patch to support building with automake 1.11 in wheezy
* Tighten build-deps on gettext and autopoint (from wheezy-backports)
* Tighten build-deps on libav{format,codec}-dev from bpo70
* Build-depend on automake = 1.11 (or else 1.9.6 is used)
* define SMBCLIENT_CFLAGS and SMBCLIENT_LIBS when running configure, because
else smbclient.pc is required which weren't available with old smbclient
.
vlc (2.1.5-1) unstable; urgency=medium
.
[ Benjamin Drung ]
* New upstream release.
* Add FFmpeg libraries as alternative build dependencies to libav.
* Enable VDPAU hardware decoder support.
.
[ Mateusz Łukasik ]
* Fix FTBFS on hurd. (Closes: #742183)
.
vlc (2.1.4-1) unstable; urgency=medium
.
* New upstream release (Closes: #742625, LP: #1276650)
* SECURITY UPDATE: crafted ASF file handling integer divide-by-zero DoS
- CVE-2014-1684
(Closes: #743033)
Checksums-Sha1:
1cc63891ff805b09c7c50b188f3cf25f987f4435 4782 vlc_2.1.5-1~bpo70+1.dsc
09c3717ed83ae97fa3fbef8858c04e21be92b62a 67287
vlc_2.1.5-1~bpo70+1.debian.tar.gz
61a116037807f6c0af3af82c9d8d14a816e65d75 25318
libvlc-dev_2.1.5-1~bpo70+1_amd64.deb
3093842f754e6a5194cc01815d3b188e22a3d336 40732
libvlc5_2.1.5-1~bpo70+1_amd64.deb
7e6977b565b1f766fe317976c1784acec4d0d9f3 113582
libvlccore-dev_2.1.5-1~bpo70+1_amd64.deb
09cb9156da4611e28dd8aba0bd7bb52d614786ce 347992
libvlccore7_2.1.5-1~bpo70+1_amd64.deb
00f7e9d24c1523ab9dec43ef63c4b321908f7afe 1184108 vlc_2.1.5-1~bpo70+1_amd64.deb
c99a2c3af988c1aebdcc1f7b38713ca7c2717da3 4944614
vlc-data_2.1.5-1~bpo70+1_all.deb
384c8d34ce46c02c5d4eff915715394726597f8a 23420384
vlc-dbg_2.1.5-1~bpo70+1_amd64.deb
322cbc2f81762be3ca6efcace6ae4e35134a18c5 2221128
vlc-nox_2.1.5-1~bpo70+1_amd64.deb
e023eac2e409d208d577f3cb01dae1aa8e8d2c1f 5546
vlc-plugin-fluidsynth_2.1.5-1~bpo70+1_amd64.deb
3248172f9cb0d0c71befa8ccf72239247304840c 10986
vlc-plugin-jack_2.1.5-1~bpo70+1_amd64.deb
23ca02ad6fe5cdaa7c4df8e752d43e1728960bc8 5416
vlc-plugin-notify_2.1.5-1~bpo70+1_amd64.deb
c2b5eec75fa646d9a3f8386f9b4e29ad61cf4df3 17542
vlc-plugin-pulse_2.1.5-1~bpo70+1_amd64.deb
8b04b80e59e7e62344635ebe274fdb17921181b8 8112
vlc-plugin-sdl_2.1.5-1~bpo70+1_amd64.deb
3a05242bb8ad5cf35235484d9e41f63346abbc3e 6130
vlc-plugin-svg_2.1.5-1~bpo70+1_amd64.deb
5b216b499bae28f0dd4f7d18bf08fa3d4b65a2ad 8552
vlc-plugin-zvbi_2.1.5-1~bpo70+1_amd64.deb
Checksums-Sha256:
4fcff7983e43707af8a79aece9a61b0bd5aa77463e6493e6ea38fc4049428ae9 4782
vlc_2.1.5-1~bpo70+1.dsc
4c75282566b309234c350b902939da0bb148154af3e087df56fadce687fb9516 67287
vlc_2.1.5-1~bpo70+1.debian.tar.gz
466376c19a4081e965f24924f225ade1446421f531de356b5053520b9d7c5806 25318
libvlc-dev_2.1.5-1~bpo70+1_amd64.deb
a50279f2751ae3aff7724b5350adacabd29146aefb53826b5e0c6945bb4daeb5 40732
libvlc5_2.1.5-1~bpo70+1_amd64.deb
23258f1fd64f44c0087d960a5aa875af05adf8313c102fd7469b1e69d6aab949 113582
libvlccore-dev_2.1.5-1~bpo70+1_amd64.deb
1f4fed11ad9b3618379d924acc064e45347443df7b5437918ee027a05f9364e2 347992
libvlccore7_2.1.5-1~bpo70+1_amd64.deb
5dc3fc6e855712bf8c5dac265094343ce9fd11135aa5e911c62ca85ff7324a4d 1184108
vlc_2.1.5-1~bpo70+1_amd64.deb
8bbfc6985a3893168e74c725890c5fcadcd4cbf92156a31861e0ac36ed5356e2 4944614
vlc-data_2.1.5-1~bpo70+1_all.deb
6543e7383a2c55bbc20b1c30f7daeab8950f651656e5914eeb6f54d7d7ceabe5 23420384
vlc-dbg_2.1.5-1~bpo70+1_amd64.deb
dccf45d86dd4de183c4c9aed5473f46be4748fd8018c9c8a3b62073a0009a850 2221128
vlc-nox_2.1.5-1~bpo70+1_amd64.deb
Bug#584621: marked as done (blender: possible symlink attack)
Your message dated Tue, 5 Aug 2014 16:02:29 +0200 with message-id 20140805140229.ga5...@nx6125.studiovescovi.eu and subject line Re: blender: possible symlink attack has caused the Debian Bug report #584621, regarding blender: possible symlink attack to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 584621: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584621 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ---BeginMessage--- Package: blender Version: 2.50~alpha~0~svn24834-2 Severity: normal Tags: security Forwarded: https://projects.blender.org/tracker/index.php?func=detailaid=22509group_id=9atid=498 Blender is subject to symlink attack when the user closes the app without saving their changes. The consequences are that an attacker determined file owned by the victim is overwritten with a .blend file, destroying whatever data was in the file in the process. Version 2.49.2~dfsg-2 isn't vulnerable to this attack since it uses ~/.blender/quit.blend instead of /tmp/quit.blend. I would suggest this behaviour be restored before Blender 2.50 is released. pabs@chianamo:~$ sudo ln -s /home/pabs/foo /tmp/quit.blend [sudo] password for pabs: pabs@chianamo:~$ ls -l /tmp/quit.blend /home/pabs/foo ls: cannot access /home/pabs/foo: No such file or directory lrwxrwxrwx 1 root root 14 Jun 5 13:51 /tmp/quit.blend - /home/pabs/foo pabs@chianamo:~$ file /tmp/quit.blend /home/pabs/foo /tmp/quit.blend: symbolic link to `/home/pabs/foo' /home/pabs/fooo: ERROR: cannot open `/home/pabs/foo' (No such file or directory) pabs@chianamo:~$ blender Ob 'Camera' - Successfully removed 0 keyframes *bpy stats* - tot exec: 5728, tot run: 0.4375sec, average run: 0.76sec, tot usage 1.4299% Saved session recovery to /tmp/quit.blend Blender quit pabs@chianamo:~$ ls -l /tmp/quit.blend /home/pabs/foo -rw-r- 1 pabs pabs 78K Jun 5 13:53 /home/pabs/foo lrwxrwxrwx 1 root root 14 Jun 5 13:51 /tmp/quit.blend - /home/pabs/foo pabs@chianamo:~$ file /tmp/quit.blend /home/pabs/foo /tmp/quit.blend: symbolic link to `/home/pabs/foo' /home/pabs/foo: Blender3D, saved as 64-bits little endian with version 2.50.0007 pabs@chianamo:~$ echo foo /home/pabs/foo pabs@chianamo:~$ ls -l /tmp/quit.blend /home/pabs/foo -rw-r- 1 pabs pabs 4 Jun 5 14:00 /home/pabs/foo lrwxrwxrwx 1 root root 14 Jun 5 13:51 /tmp/quit.blend - /home/pabs/foo pabs@chianamo:~$ file /tmp/quit.blend /home/pabs/foo /tmp/quit.blend: symbolic link to `/home/pabs/foo' /home/pabs/foo: ASCII text pabs@chianamo:~$ blender *bpy stats* - tot exec: 648, tot run: 0.0677sec, average run: 0.000104sec, tot usage 0.4556% Saved session recovery to /tmp/quit.blend Blender quit pabs@chianamo:~$ file /tmp/quit.blend /home/pabs/foo /tmp/quit.blend: symbolic link to `/home/pabs/foo' /home/pabs/foo: Blender3D, saved as 64-bits little endian with version 2.50.0007 -- bye, pabs http://wiki.debian.org/PaulWise signature.asc Description: This is a digitally signed message part ---End Message--- ---BeginMessage--- Package: blender Version: 2.71+dfsg0-1 Followup-For: Bug #584621 Today I've contacted upstream developers (via IRC channel on Freenode) and asked about this long-lasting security bug. They pointed me to: https://developer.blender.org/rB367722470aa2eada43614cd558f468b4beea851d where it's clear that the issue has been fixed with that commit. So, I'm (finally) closing this bug report. Cheers. -- Matteo F. Vescovi | Debian Maintainer GnuPG KeyID: 4096R/0x8062398983B2CF7A signature.asc Description: Digital signature ---End Message--- ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Re: [recentering] Reintroducing FFmpeg to Debian
I feel the debate is going a bit on a tangent in this thread, so I'd like to take an opportunity to recenter it a tad. We have many issues that were risen in this thread, but I believe that the cut has to be made by the people that we have in special roles for; -security for security concerns, -release for release scheduling and required transitions and our many maintainers of multimedia related packages to know what they want to link their packages against , and well, as it has been named, tech-ctte for technical matters that we can't resolve in -devel. In few words , this is how I understand the core of Andreas' plan, and has motivated many technical decisions in the packaging. Many sensible technical decisions that lead to a polite and correct way to go. Now, our main blocker to get onto the next steps Andreas has exposed with great detail in his original mail is that the package has been sitting in NEW for the last 3 months. As people voiced their feelings, it seems the vast majority does not opposes having FFmpeg in experimental . So my point here is: Shouldn't we first get it in the archive ? how can we help speeding it out of NEW ? The current packaging is a 'low-conflict' one, it can be easily transitioned into replacing libav if that's what gets decided further down the line. Hence, I see no blocker in getting it in. The licencing has an ancestor with libav, and the new files have been following the same inclusion pattern. So my guess is that the blocker may be packaging quality, as the sponsor, I have checked it, but maybe we can help reconfort ftpmasters with more eyes on it ? Thanks, -- Niv ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Bug#584621: blender: possible symlink attack
Control: reopen -1 On Tue, 2014-08-05 at 16:02 +0200, Matteo F. Vescovi wrote: Today I've contacted upstream developers (via IRC channel on Freenode) and asked about this long-lasting security bug. They pointed me to: https://developer.blender.org/rB367722470aa2eada43614cd558f468b4beea851d where it's clear that the issue has been fixed with that commit. So, I'm (finally) closing this bug report. I'm sorry but this does not resolve the issue, it simply turns the results from an arbitrary file overwrite to a denial of service (prevent other users from autosaving). Saving in /tmp at all is completely the wrong solution. The right thing to do is to either use a random path in $TMPDIR using mkstemp etc or to use somewhere under $HOME, preferably following the XDG basedir spec: http://standards.freedesktop.org/basedir-spec/basedir-spec-latest.html -- bye, pabs http://wiki.debian.org/PaulWise signature.asc Description: This is a digitally signed message part ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Processed: Re: Bug#584621: blender: possible symlink attack
Processing control commands:
reopen -1
Bug #584621 {Done: Matteo F. Vescovi mfvesc...@gmail.com} [blender]
blender: possible symlink attack
Bug reopened
Ignoring request to alter fixed versions of bug #584621 to the same values
previously set
--
584621: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584621
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
jackd2 1.9.10+20140719git3eb0ae6a~dfsg-1 MIGRATED to testing
FYI: The status of the jackd2 source package in Debian's testing distribution has changed. Previous version: 1.9.10+20140610git97e0e80b~dfsg-1 Current version: 1.9.10+20140719git3eb0ae6a~dfsg-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later changes on the next day. See https://release.debian.org/testing-watch/ for more information. ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Bug#757137: blender: FTBFS on hppa -- implicit function declarations
Package: blender Version: 2.71+dfsg0-2 Severity: normal See build log: http://buildd.debian-ports.org/status/fetch.php?pkg=blenderarch=hppaver=2.71%2Bdfsg0-2stamp=1407214327 -- System Information: Debian Release: jessie/sid APT prefers unreleased APT policy: (500, 'unreleased'), (500, 'unstable') Architecture: hppa (parisc64) Kernel: Linux 3.16.0+ (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=UTF-8) (ignored: LC_ALL set to en_CA.utf8) Shell: /bin/sh linked to /bin/dash ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Investment Proposal
Steven Raymond Banks contact by phone: +44 703 195 2641 stevenraymondba...@gmail.com We are a private investment Group Dealer company, we offer financial consulting to client companies seeking debt/loan financing, Private equity, Project Finance (e.g., public equity, private equity, real estate, Fund management, fixed income). Structured as a Ten (10) years balloon, that will attract an interest of 5% yearly for a duration of 10 years and also,we make direct Investments into listed companies to help them expand business growth and EBITDA. We look for companies with an excellent management interested in growing their company; we are interested in a wide range of Investment proposals with an exception to Trading Platforms and purchase of unbranded franchises. If your company or you know of any company with viable projects/proposals that needs financing, kindly send the Executive Summary or full Business Plan for our evaluation, if the project/proposal fits our criteria, you will hear from us within two working days. We pay referral fees on success. Well nice to meet you and I look forward to our Business acquaintance. Best Regards Steven Raymond Banks Consultant ALZAYANI INVESTMENTS LTD For further enquiries: Contact: email: (stevenraymondba...@gmail.com) ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
(no subject)
κερδίσατε εννιακοσίων χιλιάδων δολαρίων από τη Microsoft, στείλτε το όνομά σας, τη χώρα και τηλ ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
bugreport for debian package whitedune
Hi, Unfortuneatly, i dont know how how to start a new debian bugmessage from a system with reportbug but without working email. Mail is handled with a external system, which is handled via ssh. Therefore i send the errormessage in this mailinglist. Package: whitedune Version: 0.30.10-1.1 Severity: normal Version 0.30.10-1.1 of package whitedune is not able to read/write X3D 3.3 (from november 2013) commmands. The new stable update 0.99pl64 support this commands, but do not render them. Additionly version 0.99pl64 have hundreds of additional feature/bugfixes compared to version 0.30.10-1.1 | * What led up to the situation? A long time between stable versions of upstream whitedune | * What exactly did you do (or not do) that was effective (or | ineffective)? I am the upstream and wrote a new stable version with respect to X3D 3.3 The following files may be usefull for a debian update: http://129.69.35.12/dune/whitedune_0.99pl64-1.diff.gz http://129.69.35.12/dune/whitedune_0.99pl64-1.dsc http://129.69.35.12/dune/whitedune_0.99pl64-1_i386.changes http://129.69.35.12/dune/whitedune_0.99pl64-1_i386.deb http://129.69.35.12/dune/whitedune_0.99pl64.orig.tar.gz -- System Information: Debian Release: 7.6 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core) ... so long MUFTI -- ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Bug#731777: ffdiaporama: new upstream version available
Hi there, ffDiaporama 2.1 is available on deb-multimedia.org for sid and jessy; is there a reason why it can't be packaged in Debian? It would be nice to have the new version before the freeze. Cheers, Matteo pgpz0_6ZUyXBk.pgp Description: PGP signature ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Re: bugreport for debian package whitedune
Package: whitedune Version: 0.30.10-1.1 Severity: normal Control: submitter -1 Joerg Scheurich mu...@zentux.rus.uni-stuttgart.de On 2014-08-05 22:35:57, Joerg Scheurich wrote: Hi, Unfortuneatly, i dont know how how to start a new debian bugmessage from a system with reportbug but without working email. Mail is handled with a external system, which is handled via ssh. Therefore i send the errormessage in this mailinglist. Just send the message that reportbugs generates in the mail program of your choice to sub...@bugs.debian.org. I've added the address to CC to create the bugreport and I've set you as submitter. Cheers Original bug report: Package: whitedune Version: 0.30.10-1.1 Severity: normal Version 0.30.10-1.1 of package whitedune is not able to read/write X3D 3.3 (from november 2013) commmands. The new stable update 0.99pl64 support this commands, but do not render them. Additionly version 0.99pl64 have hundreds of additional feature/bugfixes compared to version 0.30.10-1.1 | * What led up to the situation? A long time between stable versions of upstream whitedune | * What exactly did you do (or not do) that was effective (or | ineffective)? I am the upstream and wrote a new stable version with respect to X3D 3.3 The following files may be usefull for a debian update: http://129.69.35.12/dune/whitedune_0.99pl64-1.diff.gz http://129.69.35.12/dune/whitedune_0.99pl64-1.dsc http://129.69.35.12/dune/whitedune_0.99pl64-1_i386.changes http://129.69.35.12/dune/whitedune_0.99pl64-1_i386.deb http://129.69.35.12/dune/whitedune_0.99pl64.orig.tar.gz -- System Information: Debian Release: 7.6 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core) ... so long MUFTI -- -- Sebastian Ramacher signature.asc Description: Digital signature ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Processed: Re: bugreport for debian package whitedune
Processing control commands: submitter -1 Joerg Scheurich mu...@zentux.rus.uni-stuttgart.de Bug #757162 [whitedune] bugreport for debian package whitedune Changed Bug submitter to 'Joerg Scheurich mu...@zentux.rus.uni-stuttgart.de' from 'Sebastian Ramacher sramac...@debian.org' -- 757162: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=757162 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Processed: libavformat55: missing support for 3D video tags in mkv decoder
Processing control commands: affects -1 xbmc Bug #757185 [libavformat55] libavformat55: missing support for 3D video tags in mkv decoder Added indication that 757185 affects xbmc -- 757185: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=757185 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Bug#757185: libavformat55: missing support for 3D video tags in mkv decoder
Package: libavformat55 Version: 6:10.3-1 Severity: wishlist Tags: upstream Control: affects -1 xbmc Hi, libav is missing support for 3D video tags in mkv files, which cripples libav using applications to autodetect 3D video files. If I understand the situation correctly there is support to pass along the stereo_mode from the mkv container to video applications in ffmpeg [0], but the same support is missing in libav [1]. ffmpeg's support seems to be originating from commits [3] and [4]. Please add support for the stereo mode tag in Debian's (and possibly upstream's) libav. -- Sebastian [0] http://git.videolan.org/?p=ffmpeg.git;a=blob;f=libavformat/matroskadec.c;h=50b75e73b600dc3c48d9b9c54602a870b7794b1a;hb=HEAD#l343 [1] http://git.libav.org/?p=libav.git;a=blob;f=libavformat/matroskadec.c;h=f15b0b3e9f5b925f8c0b76c42cb11e8117fadf8f;hb=HEAD#l322 [3] http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=e6ec9212c543c77ab3ddab90ac52021cfbbdac17 [4] http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=4c509fe305bc79a913ef1b690df6c910c732f608 -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (500, 'testing'), (500, 'stable'), (100, 'unstable'), (50, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 armhf Kernel: Linux 3.14-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libavformat55 depends on: ii libavcodec-extra-55 6:10.3-1 ii libavutil53 6:10.3-1 ii libbz2-1.0 1.0.6-5 ii libc62.19-7 ii libgnutls26 2.12.23-17 ii librtmp1 2.4+20131018.git79459a2-4 ii multiarch-support2.19-7 ii zlib1g 1:1.2.8.dfsg-1 libavformat55 recommends no packages. libavformat55 suggests no packages. -- no debconf information ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Call for paper- International Conference on Economics, Energy, Environment and Agricultural Sciences
Dear Colleagues, *Call for papers* International Conference on Economics, Energy, Environment and Agricultural Sciences * (ICBEEEAS)* *(20 -21 Sep, 2014 – Kuala Lumpur, Malaysia)* *Pearl International Hotel**, Kuala Lumpur, Malaysia* http://www.pakrdw.com/?ic=detailsid=7 The aim of *ICBEEEAS 2014* is to provide productive opportunities for academics and practitioners from interdisciplinary fields of Business, Economics, Energy, Environmental and Agricultural Sciences to meet share and take away expertise and ideas in related disciplines. The conference will bring together leading researchers in the domain of interest from around the world. The *ICBEEEAS 2014* offers interdisciplinary themes of quality RD topical developments from potential contributors and experts and provides an opportunity in bring in the new techniques or policies. *Paper Submission: For online submission, follow the link* http://www.pakrdw.com/?ic=detailsid=7info=submission *Those who wish to submit paper as an email attachment should send their papers at* *confere...@pakinisght.com;* icbeees2...@gmail.com edi...@aessweb.com ; confere...@pakrdw.com *Publication Opportunities* To see the full list of Journals for special issues of ICBEEEAS, 2014, click http://www.pakrdw.com/?ic=detailsid=7info=book_proceed *Journal Publication* After presentation in ICBEEEAS 2014, few selected papers will be published in special issues of the following journals. *Procedia - Social and Behavioral Sciences **(**Scopus Indexed**)* *Procedia-Economics and Finance **(**Scopus Indexed**)* *Asian Economic and Financial Review* (*Online ISSN:* -6737 - *Print ISSN:* 2305-2147 ) URL: http://www.aessweb.com/journals/5002 *International journal of Asian Social Science * (*Online ISSN: *2224-4441*- Print ISSN: *2226-5139 ) URL : http://www.aessweb.com/journals/5007 *International Journal of Management and Sustainability * (*Online ISSN:* 2306-0662* - Print ISSN:* 2306-9856 ) URL : http://www.pakinsight.com/?ic=journaljournal=11 *International Journal of Sustainable Development World Policy * (*Online ISSN: *2305-705X* - Print ISSN: *2306-9929) URL: http://www.pakinsight.com/?ic=journaljournal=26 *International Journal of Sustainable Energy and Environmental Research* (*Online ISSN: *2306-6253* - Print ISSN: *2312-5764) URL: http://www.pakinsight.com/?ic=journaljournal=13 Asian Journal of Agriculture and Rural Development *(Online ISSN: 2224-4433**- **Print ISSN: 2304-1455)* *URL: *http://www.aessweb.com/journals/5005 Other journals : http://www.pakrdw.com/?ic=detailsid=7info=publication *IMPORTANT DATES* *Abstract/Full Paper Submission:* 15 August, 2014 *Notification of Acceptance/Rejection:* *Within 15 days of submission* Final/Revised Paper Submission: 1st September, 2014 *Last Date of Early Bird Registration:* *1st September, 2014* Conference Dates: Sep 20-21, 2014 Warmly Regards, *Conference Co-chair,* *(ICBEEEAS) 2014 Secretariat* International Conference on Economics, Energy, Environment and Agricultural Sciences * (ICBEEEAS)* http://www.pakrdw.com/?ic=detailsid=7 *Email: **confere...@pakinisght.com;* icbeees2...@gmail.com edi...@aessweb.com ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
